iptables -t nat -F
iptables -t filter -F
iptables -t nat -X PRE_BASIC
iptables -t nat -N PRE_BASIC
iptables -t nat -X DNS
iptables -t nat -N DNS
iptables -t nat -X PRE_PROXY
iptables -t nat -N PRE_PROXY
iptables -t nat -X UPNP
iptables -t nat -N UPNP
iptables -t nat -X PT
iptables -t nat -N PT
iptables -t nat -X NAPT
iptables -t nat -N NAPT
iptables -t nat -X VS
iptables -t nat -N VS
iptables -t nat -X DMZ
iptables -t nat -N DMZ
iptables -t filter -X DOS
iptables -t filter -N DOS
iptables -t filter -X SCAN
iptables -t filter -N SCAN
iptables -t filter -X PROXY
iptables -t filter -N PROXY
iptables -t filter -X LOCAL_SERVICE
iptables -t filter -N LOCAL_SERVICE
iptables -t filter -X OUT_FILTER
iptables -t filter -N OUT_FILTER
iptables -t filter -X CFILTER
iptables -t filter -N CFILTER
iptables -t filter -X HTTP
iptables -t filter -N HTTP
iptables -t filter -X BLOCK
iptables -t filter -N BLOCK
iptables -t filter -X IN_FILTER
iptables -t filter -N IN_FILTER
iptables -t filter -X FW_UPNP
iptables -t filter -N FW_UPNP
iptables -t filter -X FW_BASIC
iptables -t filter -N FW_BASIC
iptables -t nat -A PREROUTING -j PRE_BASIC
iptables -t nat -A PREROUTING -j PRE_PROXY
iptables -t nat -A PREROUTING -j UPNP
iptables -t nat -A PREROUTING -j PT
iptables -t nat -A PREROUTING -j NAPT
iptables -t nat -A PREROUTING -j VS
iptables -t nat -A PREROUTING -j DMZ
iptables -P INPUT DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i ipsec0 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --syn -j DOS
iptables -A INPUT -p udp -j DOS
iptables -A INPUT -p icmp --icmp-type echo-request -j DOS
iptables -A INPUT -j PROXY
iptables -A INPUT -j LOCAL_SERVICE
iptables -P FORWARD DROP
iptables -A FORWARD -j OUT_FILTER
iptables -A FORWARD -j CFILTER
iptables -A FORWARD -j FW_BASIC
iptables -A FORWARD -j IN_FILTER
iptables -A FORWARD -j FW_UPNP
iptables -A FW_BASIC -i lo -j ACCEPT
iptables -A FW_BASIC -i ipsec0 -j ACCEPT
iptables -A FW_BASIC -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -A FW_BASIC -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FW_BASIC -m mark --mark 0x2511 -j ACCEPT
iptables -A LOCAL_SERVICE -m mark --mark 0x2511 -j ACCEPT
iptables -I INPUT -i br0 -j ACCEPT
iptables -A FW_BASIC -i br0 -j ACCEPT
iptables -A DOS -i ! ppp0 -j RETURN
iptables -A DOS -m psd -j SCAN
iptables -A SCAN -m limit --limit 10/s -j LOG --log-level 4 --log-prefix "[PORT SCAN]"
iptables -A SCAN -j DROP
iptables -A DOS -p tcp --syn -m limit --limit 5/s --limit-burst 10 -j RETURN
iptables -A DOS -p udp -m limit --limit 5/s --limit-burst 10 -j RETURN
iptables -A DOS -p icmp --icmp-type echo-request -m limit --limit 5/s --limit-burst 60 -j RETURN
iptables -A DOS -m limit --limit 10/s -j LOG --log-level 4 --log-prefix "[DOS] "
iptables -A DOS -j DROP
iptables -A PRE_BASIC -t nat -i ppp0 -d ! 80.229.94.73 -j DROP
iptables -t nat -D PREROUTING -i br0 -p tcp -d ! 80.229.94.74 --dport 80 -j REDIRECT --to-ports 10080
iptables -t nat -F PT
iptables -t nat -A PT -d ! 80.229.94.74  -j PNAT --set-mark 0x2511
iptables -A IN_FILTER  -i ! ppp0 -j RETURN
iptables -A IN_FILTER   -s ! 0/0 -d 80.229.94.75 -j LOG --log-prefix "[Any(ALL) rule not match]"
iptables -A IN_FILTER   -s   0/0 -d 80.229.94.75 -j LOG --log-prefix "[Any(ALL) rule match]"
iptables -A IN_FILTER   -s   0/0 -d 80.229.94.75 -p tcp -j ACCEPT
iptables -A IN_FILTER   -s   0/0 -d 80.229.94.75 -p udp -j ACCEPT
iptables -A IN_FILTER  -d 80.229.94.75 -j ACCEPT
iptables -A OUT_FILTER  -i ! br0 -j RETURN
iptables -A LOCAL_SERVICE  -p icmp -i ppp0 -j ACCEPT
iptables -A CFILTER -i br0 -m string --string GET -p tcp --dport 80 --tcp-flags ALL PSH,ACK -j HTTP
iptables -A BLOCK -j LOG --log-level 4 --log-prefix "[BLOCK]"
iptables -A BLOCK -p tcp --dport 80 -j REJECT --reject-with http-block